Control Program Security Monitoring With Dynamic Communication Limits
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Control apparatuses in manufacturing sites face security threats due to increased networking and intelligentization, with existing systems lacking anticipation and protection mechanisms for security events.
Innovation Solution
A support apparatus and assistance program are introduced, providing user interfaces for forming and editing user programs that allow selection of change instructions for security monitoring devices, enabling dynamic security level adjustments and communication limitations based on action states, thus enhancing security countermeasures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If control apparatuses are connected with external apparatuses via network and intelligentization is increased, then processing capability and connectivity are improved, but security vulnerability increases
Solution Approach 1:
The patent segments the control apparatus into multiple functional units including a security monitoring device, a security protection process, and a level determining part. This segmentation allows the system to monitor and respond to security events independently while maintaining overall system connectivity and functionality.
Solution Approach 2:
The patent implements preliminary security measures by pre-configuring security levels and monitoring mechanisms before security events occur. The security monitoring device continuously monitors for security events and the system is prepared to execute security protection processes at predetermined security levels, enabling proactive rather than reactive security management.
2Reliability
If security monitoring and protection mechanisms are added to control apparatuses, then security protection capability is improved, but device complexity increases
Solution Approach 1:
The patent designs the security monitoring device and security protection process to perform multiple functions: monitoring security events, determining security levels, executing protection processes, and managing communication limitations. This multi-functionality reduces the need for separate dedicated components for each security function, thereby managing complexity while enhancing protection capability.
Solution Approach 2:
The control apparatus is designed to autonomously monitor its own security state, determine appropriate security levels, and execute protection processes without requiring external intervention. The level determining part automatically assesses security conditions and triggers appropriate security responses, enabling the system to self-manage security operations.
3Adaptability or versatility
If security levels and communication limitations are dynamically adjusted based on action states, then security response flexibility is improved, but control complexity increases
Solution Approach 1:
The patent implements dynamic security level adjustment where the security level is not fixed but changes based on the action state of the control apparatus. The level determining part continuously assesses the current action state and adjusts the security level accordingly, enabling the system to adapt its security posture to current operational conditions rather than maintaining a static security configuration.
Solution Approach 2:
The security monitoring device provides continuous feedback about security events and system state to the level determining part. This feedback loop enables the system to automatically adjust security levels based on real-time conditions, with the security protection process responding to feedback by implementing appropriate communication limitations or protection measures.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
The purpose of the present invention is to solve the new problem of appropriately protecting a control apparatus and a controller system including the control apparatus against a probable security event. This support device includes: a generating/editing unit that provides a user interface for generating or editing a user program which defines the content of a control arithmetic operation to be performed on the control apparatus; and an output unit that outputs the user program generated via the user interface provided by the generating/editing unit. The generating/editing unit provides the user interface for receiving selection of a change command for changing the behavior of a security-monitoring device conducted through execution of a security protection process as a command constituting the user program.